Hi All, I've got the working version now. Tips here: 1. baseString: consumber_key,oauth_token double encode, others encode once. 2. signature key, don't encode 3. request url: encode value once, that is name1=encode(value1)&name2=encode(value2)... 4. don't add secret to baseString 5....